Aaron DeSpain
CISO, Lurie

Aaron DeSpain

I am a Chief Information Security Officer with more than 19 years of experience leading enterprise cybersecurity, risk management, and regulatory compliance programs across complex healthcare and technology environments. I currently serve as CISO for Ann & Robert H. Lurie Children’s Hospital of Chicago, a nationally ranked pediatric academic medical center.

My work focuses on building sustainable cybersecurity programs that protect patient care, enable innovation, and strengthen organizational resilience. My experience spans enterprise risk, security operations, identity and access management, vulnerability management, security architecture, medical device and IoT security, third-party risk, and incident response.

I partner closely with executive leadership, legal, compliance, technology, clinical, and research leaders to translate cyber risk into business decisions and clear accountability. My experience includes Board and executive cybersecurity governance, large-scale remediation and transformation programs, and building security capabilities designed for long-term sustainability.

I also serve as an adjunct cybersecurity instructor and hold the Digital Directors Network Boardroom Certified Qualified Technology Expert (QTE) designation.